diff --git a/Dockerfile b/Dockerfile
index cf9b038..fecda44 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,9 @@
 FROM rust:1-slim-bookworm AS builder
 
+# native-tls (via loco-oauth2) needs OpenSSL headers + pkg-config to link.
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends pkg-config libssl-dev \
+ && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /usr/src
 
@@ -9,8 +13,9 @@ RUN cargo build --release --bin kompress-eshop-cli
 
 FROM debian:bookworm-slim
 
+# libssl3 = runtime shared lib for the dynamically-linked OpenSSL above.
 RUN apt-get update \
- && apt-get install -y --no-install-recommends ca-certificates curl \
+ && apt-get install -y --no-install-recommends ca-certificates curl libssl3 \
  && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /usr/app